Bug bounty POCs, ethical hacking writeups and cybersecurity tutorials.https://blog.securitybreached.org/en-ushttps://blog.securitybreached.org/2025/01/20/purple-teaming-what-not-to-do-in-ot-iot-testing-to-avoid-halting-the-factory-or-sinking-the-oil-rig/https://blog.securitybreached.org/2025/01/20/purple-teaming-what-not-to-do-in-ot-iot-testing-to-avoid-halting-the-factory-or-sinking-the-oil-rig/Testing operational and IoT systems is no easy feat, especially when the stakes involve halting a factory or sinking an oil rig. Every one of us who has embarked on the journey to test OT/IoT systems has felt nervous and cautious about things going south. Here’s to all the comrades out there who want to excel in these situationsMon, 20 Jan 2025 08:47:26 GMTpurple-teaminghow-toiot-securitypurpleteamingredteamingtutorialshttps://blog.securitybreached.org/2024/10/22/from-staging-to-full-admin-control-in-prod-a-breakdown-of-critical-authentication-flaws/https://blog.securitybreached.org/2024/10/22/from-staging-to-full-admin-control-in-prod-a-breakdown-of-critical-authentication-flaws/In this blog, I explore a real-world case of an Admin Panel Takeover caused by broken authentication and insecure configurations. By exploiting a misconfigured JWT token from a staging environment, full administrative access was gained to a production system, exposing sensitive user data and critical application controls.Tue, 22 Oct 2024 14:59:39 GMTbugbounty-pocauthentication-bypassbugbountybugbounty-pocvulnerabilityhttps://blog.securitybreached.org/2024/10/14/ai-hijack-how-i-took-control-of-an-ai-assistant/https://blog.securitybreached.org/2024/10/14/ai-hijack-how-i-took-control-of-an-ai-assistant/A simple API key leak led to the complete takeover of an AI assistant in production. Allowing to change AI's Instructions.Mon, 14 Oct 2024 03:38:18 GMTbugbounty-pocai-securitybugbountybugbounty-pocvulnerabilityhttps://blog.securitybreached.org/2024/06/28/finding-hidden-threats-how-i-found-leaked-aws-credentials-in-an-android-app-api-using-dast/https://blog.securitybreached.org/2024/06/28/finding-hidden-threats-how-i-found-leaked-aws-credentials-in-an-android-app-api-using-dast/Found a critical vulnerability involving leaked AWS credentials within an Android App API during a bug bounty hunt. by utilizing Dynamic Application Security Testing (DAST) and the Mobile Security Framework (MobSF) to uncover the vulnerability. This blog post provides a step-by-step guide for newcomers to set up their own testing environments and utilize MobSF.Fri, 28 Jun 2024 22:32:31 GMTbugbounty-poctutorialsandroid-securityapi-securityapplication-securityaws-takeoveraws-vulnerabilitiesbugbountybugbounty-poccybersecuritydastdynamic-analysismobile-app-securitymobsfmobsf-tutorialsecurity-testingsecurity-toolssubdomain-takeovertutorialsvulnerabilityvulnerability-detectionhttps://blog.securitybreached.org/2023/08/18/bug-bounty-blueprint-a-beginners-guide/https://blog.securitybreached.org/2023/08/18/bug-bounty-blueprint-a-beginners-guide/This guide is for beginners to dive into Bug Bounty Hunting. It provides foundational skills, tips, tools, and resources for Bug Bounty Hunters.Fri, 18 Aug 2023 03:02:58 GMTbug-bounty-guidebug-bounty-beginners-guidebug-bounty-blueprint-a-beginners-guidebug-bounty-guidebug-bounty-huntingcloud-securityctf-challengescybersecuritycybersecurity-certificationethical-hackingguide-001-getting-started-in-bug-bounty-huntinghacker-communityhow-to-learn-bug-bounty-huntinghow-toit-traininglearning-resourcesonline-learningonline-securitypenetration-testingpractical-tipsreport-writingsecurity-researchskill-developmenttechnologyvulnerability-assessmentweb-securityhttps://blog.securitybreached.org/2023/04/19/how-i-manipulated-my-rank-on-the-bugcrowd-platform/https://blog.securitybreached.org/2023/04/19/how-i-manipulated-my-rank-on-the-bugcrowd-platform/In recent years, Bug Bounties have gained significant popularity as a growing number of companies rely on crowdsourcing platforms to identify vulnerabilities within their systems. As such, the securitWed, 19 Apr 2023 03:27:43 GMTbugbounty-poctutorialsbugbountybugbounty-poctutorialsvulnerabilityhttps://blog.securitybreached.org/2022/05/19/hacking-100k-loyalty-programs-for-fun-and-profit/https://blog.securitybreached.org/2022/05/19/hacking-100k-loyalty-programs-for-fun-and-profit/This blog post is about how a hacker could have Hacked 100k+ Loyalty Programs to get free points & redeem them for free stuff or coupons.Thu, 19 May 2022 21:15:32 GMTbugbounty-pocbugbountybugbounty-pochow-tovulnerabilityhttps://blog.securitybreached.org/2022/02/27/hacking-subscription-plans-for-free-service/https://blog.securitybreached.org/2022/02/27/hacking-subscription-plans-for-free-service/The blog post describes how I was able to bypass subscription plans to get access to paid services for free.Sun, 27 Feb 2022 01:14:52 GMTbugbounty-pocbugbountybugbounty-poctutorialsvulnerabilityhttps://blog.securitybreached.org/2020/06/30/using-inspect-element-to-bypass-security-restrictions-bug-bounty-poc/https://blog.securitybreached.org/2020/06/30/using-inspect-element-to-bypass-security-restrictions-bug-bounty-poc/Hey guys so this blog post is how I was able to Bypass Security restrictions by using inspect element and use Paid Features.Tue, 30 Jun 2020 22:56:18 GMTbugbounty-poctutorialsbugbountybugbounty-poctutorialshttps://blog.securitybreached.org/2020/04/04/playing-with-json-web-tokens-for-fun-and-profit/https://blog.securitybreached.org/2020/04/04/playing-with-json-web-tokens-for-fun-and-profit/JSON Web Token (JWT) is an open standard (RFC 7519) that defines a compact and self-contained way for securely transmitting information between parties.Sat, 04 Apr 2020 15:44:40 GMTbugbounty-pochttps://blog.securitybreached.org/2020/03/31/microsoft-rce-bugbounty/https://blog.securitybreached.org/2020/03/31/microsoft-rce-bugbounty/Hey guys so this blog post is about RCE issue reported to Microsoft bug bounty program, Remote Code execution issue existed in microsoft.com subdomain running Apache Solr.Tue, 31 Mar 2020 15:33:29 GMTbugbounty-pocbugbountybugbounty-pocrcereconvulnerabilityhttps://blog.securitybreached.org/2020/03/17/getting-started-in-android-apps-pentesting/https://blog.securitybreached.org/2020/03/17/getting-started-in-android-apps-pentesting/Pen-testing android apps require different methodologies than web applications. The difference is that you have to figure out by different methods.Tue, 17 Mar 2020 02:59:21 GMTtutorialshttps://blog.securitybreached.org/2020/02/19/hacking-sms-api-service-provider-of-a-company-android-app-static-security-analysis-bug-bounty-poc/https://blog.securitybreached.org/2020/02/19/hacking-sms-api-service-provider-of-a-company-android-app-static-security-analysis-bug-bounty-poc/This blog post is about static analysis of Android App & due to insecure storage of SMS API credentials I was able to Takeover the SMS API.Wed, 19 Feb 2020 01:14:22 GMTbugbounty-poctutorialsbugbounty-pochow-torecontutorialsvulnerabilityhttps://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/https://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/this blog post is about Exploiting Insecure Firebase Databases, due to Improper set security rules one can write data to the database in certain conditions here’s a Short POC tutorial of the issue.Tue, 04 Feb 2020 02:41:53 GMTbugbounty-poctutorialsbugbountybugbounty-pochackeronerecontutorialsvulnerabilityhttps://blog.securitybreached.org/2020/01/26/improper-input-validation-add-custom-text-and-urls-in-sms-send-by-snapchat-bug-bounty-poc/https://blog.securitybreached.org/2020/01/26/improper-input-validation-add-custom-text-and-urls-in-sms-send-by-snapchat-bug-bounty-poc/Hey guys so this blog post is about an Issue in Snapchat's Website, due to Improper Input Validation one can add custom text & urls in SMS send by Snapchat here's a Short POC of the issue.Sun, 26 Jan 2020 15:05:17 GMTbugbounty-pocbugbounty-pochackeronevulnerabilityhttps://blog.securitybreached.org/2020/01/22/user-account-takeover-via-signup-feature-bug-bounty-poc/https://blog.securitybreached.org/2020/01/22/user-account-takeover-via-signup-feature-bug-bounty-poc/This blog is about an Account Takeover issue i found in a web app where creating a new account on already existing email will give access to users account,Wed, 22 Jan 2020 10:48:37 GMTbugbounty-pocauthentication-bypassbugbounty-pochttps://blog.securitybreached.org/2018/12/08/how-i-was-able-to-bypass-email-verification/https://blog.securitybreached.org/2018/12/08/how-i-was-able-to-bypass-email-verification/Hello Masters and Learner I hope you are doing well and always put your efforts to secure the world so that no can get benefits unethically. the main reason why i am writing this article is that someSat, 08 Dec 2018 17:23:11 GMTuncategorizedhttps://blog.securitybreached.org/2018/11/05/hacking-a-company-through-help-desk-bug-bounty-poc/https://blog.securitybreached.org/2018/11/05/hacking-a-company-through-help-desk-bug-bounty-poc/This Blog is about how i found & used Ticket Trick issue to Hack a Comapnies Help Center and access other users support ticketsMon, 05 Nov 2018 20:10:46 GMTbugbounty-pocauthentication-bypassbugbountybugbounty-pochttps://blog.securitybreached.org/2018/11/03/p1-like-a-boss-information-disclosure-via-github-leads-to-employee-account-takeover/https://blog.securitybreached.org/2018/11/03/p1-like-a-boss-information-disclosure-via-github-leads-to-employee-account-takeover/This Blog is About an issue i found in a site where a .js filke on Github contains a valid Email & Password of an Employee that leads to Help center access.Sat, 03 Nov 2018 14:19:58 GMTbugbounty-pocbugbounty-pocreconhttps://blog.securitybreached.org/2018/10/27/privilege-escalation-like-a-boss/https://blog.securitybreached.org/2018/10/27/privilege-escalation-like-a-boss/[gist]afe596e6eb02612562216da7b0636661[/gist]Sat, 27 Oct 2018 06:56:37 GMTuncategorizedhttps://blog.securitybreached.org/2018/09/24/subdomain-takeover-via-unsecured-s3-bucket/https://blog.securitybreached.org/2018/09/24/subdomain-takeover-via-unsecured-s3-bucket/This Blog is about an issue i found in a web where an Unsecured S3 Bucket connected to the website gave way to Takeover teh Subdoamin.Mon, 24 Sep 2018 22:19:34 GMTbugbounty-pocbugbounty-pocsubdomain-takeoverhttps://blog.securitybreached.org/2018/09/16/idor-account-takeover-using-facebook/https://blog.securitybreached.org/2018/09/16/idor-account-takeover-using-facebook/Blog about an IDOR issue i found in a web where changing user id in FB auth callback request connects my FB account with victims Web AccountSun, 16 Sep 2018 21:09:25 GMTbugbounty-pocidorhttps://blog.securitybreached.org/2018/09/10/sqli-login-bypass-autotraders/https://blog.securitybreached.org/2018/09/10/sqli-login-bypass-autotraders/Simple Short POC about an Issue I discovered in AutoTrader Webmail panel that allows Login Bypass and gave me Webmail Admin Panel AccessMon, 10 Sep 2018 13:41:25 GMTbugbounty-pocauthentication-bypasssql-injectionhttps://blog.securitybreached.org/2018/09/09/zol-zimbabwe-authbypass-sqli-xss/https://blog.securitybreached.org/2018/09/09/zol-zimbabwe-authbypass-sqli-xss/This Post is About an issues I found in ZOL Zimbabwe Website that was Authentication bypass follwong with XSS and SQLi and could lead to Database Takeover.Sun, 09 Sep 2018 21:08:39 GMTbugbounty-pocauthentication-bypasssql-injectionxsshttps://blog.securitybreached.org/2018/09/08/sqli-bootcampnutanix-com-bug-bounty-poc/https://blog.securitybreached.org/2018/09/08/sqli-bootcampnutanix-com-bug-bounty-poc/SQL Injection Vulnerability that i found inbootcamp.nutanix.com and how i exploited it - Bug Bounty POC Security Breached BlogSat, 08 Sep 2018 17:17:10 GMTbugbounty-pocbugbounty-pocsql-injectionhttps://blog.securitybreached.org/2018/09/07/rce-jenkins-instance-dosomething-org-bug-bounty-poc/https://blog.securitybreached.org/2018/09/07/rce-jenkins-instance-dosomething-org-bug-bounty-poc/RCE in Jenkins Insecure Instance of Dosomething.org and What can an attacker do with an RCE in an Insecure Jenkins Instance.Fri, 07 Sep 2018 21:12:59 GMTbugbounty-pocbugbounty-pocrcehttps://blog.securitybreached.org/2018/05/23/edmodo-number-compromised/https://blog.securitybreached.org/2018/05/23/edmodo-number-compromised/Hello 1337s, I hope you all are doing good and hunting websites. Today I'm going to tell you about a very interesting finding which was very simple and I never expected that it could really exist therWed, 23 May 2018 12:20:33 GMTbugbounty-pochttps://blog.securitybreached.org/2018/05/22/ios-11-4-authentication-bug-siri-cve-2018-4238/https://blog.securitybreached.org/2018/05/22/ios-11-4-authentication-bug-siri-cve-2018-4238/IOS 11.2.6 IOS 11.4 Siri Authentication | CVE-2018-4238Tue, 22 May 2018 13:31:05 GMTbugbounty-pocbugbounty-pochttps://blog.securitybreached.org/2018/05/18/get-subscription-of-120-year-for-free-bug-bounty-poc/https://blog.securitybreached.org/2018/05/18/get-subscription-of-120-year-for-free-bug-bounty-poc/How I was able to get subscription of $120/year For Free WeTransfer Bug Bounty How i found The issue in Wetransfer and reported it via ZerocopterFri, 18 May 2018 09:22:09 GMTbugbounty-pocbugbounty-pocvulnerabilityhttps://blog.securitybreached.org/2018/02/05/how-i-found-idor-on-twitters-acquisition-mopub-com/https://blog.securitybreached.org/2018/02/05/how-i-found-idor-on-twitters-acquisition-mopub-com/Hello everyone, Jay Jani noob here with another noobish finding. As 2k18 has started, I thought to hunt down Twitter for gaining reputation on HackerOne. I tried to find a bug on their acquisition - MMon, 05 Feb 2018 08:52:15 GMTuncategorizedhttps://blog.securitybreached.org/2018/02/04/hunting-insecure-direct-object-reference-vulnerabilities-for-fun-and-profit-part-1/https://blog.securitybreached.org/2018/02/04/hunting-insecure-direct-object-reference-vulnerabilities-for-fun-and-profit-part-1/This is my first Blog post and i am starting with IDOR Vulnerability. In this Post you will know about many endpoints to test IDOR vulnerability! Hope you will like it.Sun, 04 Feb 2018 18:14:14 GMTbugbounty-poctutorialsuncategorizedbugbountyhackeroneidorvulnerabilityhttps://blog.securitybreached.org/2018/02/02/how-i-was-able-to-bypass-xss-protection-on-hackerones-private-program/https://blog.securitybreached.org/2018/02/02/how-i-was-able-to-bypass-xss-protection-on-hackerones-private-program/Hello friends, This is Jay Jani here and First of all frankly I would like to tell you all that I am completely a noob so I did some noobish things here. Please forgive me for my noobness. So, I wasFri, 02 Feb 2018 12:10:59 GMTuncategorizedhttps://blog.securitybreached.org/2018/01/27/how-i-was-able-to-download-any-file-from-web-server/https://blog.securitybreached.org/2018/01/27/how-i-was-able-to-download-any-file-from-web-server/I tried to open the file but then I came to know that the file is only downloadable :/ WTF. You can't open it on web server. But I don't give up coz i have an other option that was rename the file witSat, 27 Jan 2018 21:23:02 GMTbugbounty-pocdownloadanyfilehttps://blog.securitybreached.org/2018/01/16/knoxss-for-dummies-a-new-detailed-guide-to-use-knoxss-pro-in-real-world/https://blog.securitybreached.org/2018/01/16/knoxss-for-dummies-a-new-detailed-guide-to-use-knoxss-pro-in-real-world/Hello to all my brothers and friends.Tue, 16 Jan 2018 23:16:19 GMTbugbounty-poctutorialsbugbounty-pochow-totutorialsxsshttps://blog.securitybreached.org/2017/12/19/security-researcher-saved-careem-from-a-data-breach/https://blog.securitybreached.org/2017/12/19/security-researcher-saved-careem-from-a-data-breach/The Post is about a Researcher found a security loop hole in Careem Cab app that let him takeover 1.4 Million user information,Tue, 19 Dec 2017 21:19:34 GMTnewsnewshttps://blog.securitybreached.org/2017/12/19/unrestricted-file-upload-to-rce-bug-bounty-poc/https://blog.securitybreached.org/2017/12/19/unrestricted-file-upload-to-rce-bug-bounty-poc/How I bypassed image upload functionality on a project to gain RCE,Tue, 19 Dec 2017 12:48:12 GMTbugbounty-pocbugbounty-pocrcehttps://blog.securitybreached.org/2017/12/10/how-i-was-able-to-takeover-facebook-account-bug-bounty-poc/https://blog.securitybreached.org/2017/12/10/how-i-was-able-to-takeover-facebook-account-bug-bounty-poc/hey all here is ameer hamza,  Facebook has recently introduced login with phone functionality if you have forgotten your password. however I was able to exploit it which leads to access the facebook aSun, 10 Dec 2017 15:30:44 GMTbugbounty-pochttps://blog.securitybreached.org/2017/11/25/guide-to-basic-recon-for-bugbounty/https://blog.securitybreached.org/2017/11/25/guide-to-basic-recon-for-bugbounty/The Post describe basic steps i follow before starting actual hunt for bugs in a bug bounty program, how i map out the target and which tools to use.Sat, 25 Nov 2017 11:00:35 GMTtutorialsbugbountyhow-toreconhttps://blog.securitybreached.org/2017/11/20/uber-wildcard-subdomain-takeover/https://blog.securitybreached.org/2017/11/20/uber-wildcard-subdomain-takeover/one of ubers domain was vulnerable to Wildcard subdomain takeover, Basically as heroku wildcard is Opened and i can register any subdomain & takeover it.Mon, 20 Nov 2017 19:27:41 GMTbugbounty-pocbugbounty-pocsubdomain-takeoverhttps://blog.securitybreached.org/2017/11/04/access-localhost-via-virtual-host-virtual-host-enumeration/https://blog.securitybreached.org/2017/11/04/access-localhost-via-virtual-host-virtual-host-enumeration/The Blog post is about what are Virtual Host, how U can Enumerate them and get access to the vulnerable system, including POC of resent BugBounty Report.Sat, 04 Nov 2017 10:09:57 GMTbugbounty-poctutorialsbugbounty-pochttps://blog.securitybreached.org/2017/10/11/what-is-subdomain-takeover-vulnerability/https://blog.securitybreached.org/2017/10/11/what-is-subdomain-takeover-vulnerability/The post explains the basic of subdomain takeover vulnerability, how to identify and exploit the issue, post contains 5 diff services step to step guide.Wed, 11 Oct 2017 09:48:24 GMTtutorialsbugbounty-pocsubdomain-takeovertutorialshttps://blog.securitybreached.org/2017/10/10/exploiting-insecure-cross-origin-resource-sharing-cors-api-artsy-net/https://blog.securitybreached.org/2017/10/10/exploiting-insecure-cross-origin-resource-sharing-cors-api-artsy-net/How to find & Exploit Insecure Cross Origin Resource Sharing ( CORS ), inspired by geekboy & I successfully exploit the issue in a Bug Bounty programTue, 10 Oct 2017 19:27:01 GMTbugbounty-pocbugbounty-poccorshttps://blog.securitybreached.org/2017/10/10/bugcrowds-domain-subdomain-takeover-vulnerability/https://blog.securitybreached.org/2017/10/10/bugcrowds-domain-subdomain-takeover-vulnerability/Bugcrowd's Domain & Subdomain takeover vulnerability Due to Expired/Misconfigured Fastly & Pantheon Services.. A small writeup about how i did it?Tue, 10 Oct 2017 19:20:59 GMTbugbounty-pocbugbounty-pocsubdomain-takeoverhttps://blog.securitybreached.org/2017/10/10/subdomain-takeover-lamborghini-hacked/https://blog.securitybreached.org/2017/10/10/subdomain-takeover-lamborghini-hacked/I found an Expired Cloudfront distribution on one of the lamborghini.com Subdomains! The Post explains how easy it is to takeover a subdomain!Tue, 10 Oct 2017 18:44:05 GMTbugbounty-pocbugbounty-pocsubdomain-takeoverhttps://blog.securitybreached.org/2017/10/10/sqli-xss-vulnerabilities-in-a-popular-airlines-website/https://blog.securitybreached.org/2017/10/10/sqli-xss-vulnerabilities-in-a-popular-airlines-website/SQL injection & XSS vulnerabilities in a popular Airlines Websites That can cause complete compromisation of the database and System! Here are the detailsTue, 10 Oct 2017 18:34:25 GMTbugbounty-pocbugbounty-pocsql-injectionxss